Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa
File: 821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa (raw, json)
Hash identifier: 8wuqLiRTQlrUOg/+YwVvjFUpHqoJuxA0um19Y/2X87I=
Subject key identifier: EA:CA:09:C7:E9:C1:C4:D7:16:F9:BF:14:C5:D1:26:A8:20:B7:C2:BD
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C1EB65084B8B61B23E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.94.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c1:eb:65:08:4b:8b:61:b2:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=7bacd32e-ae85-4ab2-8932-10a22be25fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:ac:a0:a2:8c:24:29:0a:f5:ec:78:4f:c0:
71:fe:ef:73:64:a5:01:b6:a5:5c:66:99:a7:61:43:
0f:4a:43:2f:b4:be:68:68:6a:ea:a3:ed:a6:f7:fa:
78:03:22:bc:5b:56:72:f0:aa:cc:3c:29:51:16:16:
39:14:6d:ee:4a:53:1f:53:88:fc:4c:23:c0:0f:b9:
b9:00:f8:92:56:08:4c:af:b9:92:3a:22:67:ed:94:
fb:11:04:4b:36:67:20:1e:42:25:e8:9d:68:29:63:
85:18:2f:a1:d5:f5:43:8b:52:d1:d1:e4:0b:3d:e5:
80:24:73:45:76:98:e8:e0:ac:9d:02:96:81:d2:67:
02:2e:e2:3b:35:71:8c:87:8f:cd:b0:97:90:db:2c:
6b:63:a1:4d:8e:6f:f6:09:2f:5a:cd:00:9c:ca:59:
8b:af:93:07:58:da:48:8f:35:fe:03:22:13:93:92:
a3:7e:9b:4a:0f:03:e9:53:b5:71:61:4d:85:a7:a2:
4d:41:49:f6:b6:46:79:51:84:93:0f:d6:76:ca:de:
ee:80:11:fb:5a:b7:ae:3e:e0:d9:70:4e:05:47:a0:
e9:4b:5e:c4:89:3c:15:41:94:21:0b:58:d4:68:f0:
7b:f1:75:cd:59:c8:f7:0e:3d:05:f8:f7:c9:c2:b3:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:09:C7:E9:C1:C4:D7:16:F9:BF:14:C5:D1:26:A8:20:B7:C2:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:85:40:b5:a1:14:90:51:37:01:fc:8f:e6:8d:b6:b4:30:c2:
1d:a7:d7:04:fb:39:d9:38:51:19:99:83:b8:d4:27:1e:2f:12:
75:46:95:08:2c:6f:2f:53:cf:c0:75:d4:f7:76:03:ef:de:aa:
7b:fe:3a:1a:00:2b:f9:08:f8:c9:bc:e7:3c:9b:bc:4b:36:26:
06:7e:6c:a8:fe:b4:fb:32:7c:02:e3:fd:8e:20:b5:15:1f:61:
e6:17:af:c6:f2:b1:e5:fc:8b:3a:45:6a:ac:f0:3a:18:e7:29:
8e:40:62:05:5b:51:26:06:bb:a5:7f:59:b3:44:6a:9d:bd:b4:
42:5b:cb:48:07:1f:78:79:fe:31:2f:95:8b:9a:02:ef:5b:a7:
35:8a:ae:53:e2:09:57:68:dc:04:4d:07:83:01:df:38:37:e3:
01:58:69:81:ec:ff:02:9b:56:e5:1f:03:3f:e1:2f:94:12:58:
19:53:88:99:95:ca:12:aa:e8:bd:4a:f4:8a:9d:7d:4e:33:76:
01:8d:8e:d1:04:c5:1c:83:83:31:27:92:d9:85:67:12:c2:3e:
04:4d:cd:7d:45:39:07:cd:8e:f9:a8:4a:82:60:fe:dc:d8:6e:
1c:4a:99:fb:ed:78:fc:8c:53:8e:ee:4c:1e:42:a1:75:5d:5c:
ce:6f:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:28:56 2025 by rpki-client